I am attempting to do some forensics on my iPad. I am following along with this article from sans.. on page 13 is the start of the Jailbreaking section...I would like to mount the image and then find ...

I'm trying to recover some lost files by grep-scanning a hard disk. (The OS is Darwin 11.4.2. The file system is HFS.)
How can I determine where a file (or contiguous chunk thereof) begins and ends ...

I am presently working as a summer intern.
My first objective is, given a collection of files, recover and identify the file types present in it.
To download sample pseudo-forensics data I have been ...

I know to dump memory images in Window. (eg-dumpit) But I don't know how to dump memory images in Linux.
I wanna get memory images in Linux and from linux to linux with ssh connection or something.
...

I have an ext. drive with a corrupted NTFS (in the sense that NTFS-3G refuses to mount it).
I really want to just take an image of the drive, stash that somewhere for later, and reformat the drive so ...

Some jpeg files have been recovered from an image file of a floppy disk.
Is there a way to get the modified, created and last accessed date and times of those files recovered, i.e. the time and date ...

I have two disks. They're both bootable and run Linux. When I physically mount the disks, I can see scsi devices get added. /dev/sdb and /dev/sdc. However the partitions are not detected. I can't see ...

First, a brief description of the situation: a computer sits hidden near a display in a gallery of some sort, acting as the silent workhorse for a piece. Despite its programmer's best intentions the ...

My significant other and I are sometimes paranoid that a foreign government usually associated with last year's Gmail security breach may be attempting to gain access to our computers.
There were a ...

So recently I found that someone has been using my computer without consent, browsing folders, etc....
I could change all my passwords straight away, but I'm curious as the what the intruding party ...